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1. (original) A method for classifying a data packet in a 
data processing device to determine which of a plurality of 
predefined processing rules applies to the data packet, each 
said rule being associated with a range of possible data 
values in each of a plurality of dimensions corresponding to 
respective data items in the data packet, the method 
comprising: 

(a) for each dimension, identifying the corresponding data 
value in the packet and determining which of a set of 
predefined basic ranges contains that data value, wherein 
the basic ranges correspond to respective non-overlapping 
value ranges between successive rule range boundaries in 
that dimension; 

(b) for the basic range so determined for each dimension, 
selecting a corresponding basic range identifier from a set 
of predefined basic range identifiers corresponding to 
respective basic ranges in that dimension, wherein, for each 
of at least two dimensions/ the basic range identifiers 
comprise respective po-bit strings generated independently 
for that dimension by 

- (bl) defining a hierarchy of primitive ranges, which 
correspond to respective portions of the rule ranges 
between rule range boundaries in that dimension such 
that each rule range in the dimension is represented by 
one or more primitive ranges, wherein primitive ranges 
in the same level of the hierarchy are non-overlapping 
and each primitive range in a level above the lowest 
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hierarchy level is a subset of a primitive range in the 
level below, 

- {b2) assigning a primitive range identifier to each 
primitive range in the hierarchy such that primitive 
ranges in the lowest level have different identifiers 
and, in each higher level, any ranges which are subsets 
of the same range in the level below have different 
identifiers, and 

- (b3) producing a unique po-bit basic range identifier 
for each basic range such that the po-bit identifier 
comprises a concatenation of the primitive range 
identifiers for the primitive ranges intersected by 
that basic range, the primitive range identifiers being 
concatenated in order of increasing hierarchy level; 

(c) combining the basic range identifiers for said plurality 
of dimensions to produce a search key; 

(d) supplying the search key to a ternary 
content-addressable memory; and 

(e) in the memory, comparing the search key with a set of 
prestored ternary rule vectors, each associated with a said 
rule and derived for that rule in dependence on the 
hierarchy for each of said at least two dimensions, to 
identify at least one rule which applies to the data packet. 

2. (original) A method according to claim 1 wherein, for 
each of said plurality of dimensions, the basic range 
identifiers comprise respective po-bit strings generated 
independently for that dimension by steps (bl) to (b3) . 

3. (original) A method according to claim 1 wherein, 
in step (b3), each pc-bit basic range identifier begins with 
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said concatenation of primitive range identifiers, and, in 
step (c), the search key is produced by concatenating the 
basic range identifiers for said plurality of dimensions. 

4. (original) A method according to claim 3 wherein 

each ternary rule vector is generated from a concatenation 
of subvectors, corresponding to respective said dimensions, 
for the associated rule, where, for each of said at least 
two dimensions, for each rule a said subvector corresponding 
to each of the primitive ranges representing the rule range 
in that dimension is defined such that the subvector 
corresponding to a primitive range begins with a 
concatenation, in order of increasing hierarchy level, of 
the primitive range identifier of that range with the 
primitive range identifier of any lower-level primitive 
range of which that range is a subset, the resulting 
concatenation being made up to pp-bits by bits of value X. 

5. (original) A method according to claim 4 wherein the 
set of rule vectors comprises, for each rule, a rule vector, 
comprising said concatenation of subvectors, for each 
possible combination of subvectors for that rule. 

6. (original) A method according to claim 4 wherein 
the set of rule vectors comprises, for each rule, a reduced 
set of rule vectors obtained by eliminating redundancy in 
the set of all possible combinations of subvectors for that 
rule in a concatenation of the subvectors corresponding to 
respective said dimensions. 
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7. (original) A method according to claim 1 wherein 
the primitive range identifiers assigned in step (b2) are 
such that the identifiers assigned to primitive ranges in 
the lowest hierarchy level are prefix unique, and the 
identifiers assigned to any ranges which are subsets of the 
same range in the level below are prefix unique. 

8. (original) A method according to claim 1 wherein the 
primitive range identifiers assigned in step (b2) are such 
that primitive range identifiers in the same hierarchy level 
have the same number of bits. 

9. (original) A method according to claim 1 wherein a 
priority order is defined for said plurality of rules, and 
wherein step (e) includes selecting the highest priority 
rule which applies to the data packet. 

10. (original) A method according to claim 1, the 
method including, prior to performing step (a) for a first 
data packet: 

generating said set of basic range identifiers for each 
of said plurality of dimensions; and 

deriving said set of ternary rule vectors in dependence 
on the hierarchy for each of said at least two dimensions, 
and storing the rule vectors in the ternary 
content-addressable memory. 

11. (original) Apparatus for classifying a data packet to 
determine which of a plurality of predefined processing 
rules applies to the data packet, each said rule being 
associated with a range of possible data values in each of a 
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plurality of dimensions corresponding to respective data 
items in the data packet, the apparatus comprising: 
a first memory storing, for each said dimension, a set of 
basic range identifiers corresponding to respective basic 
ranges in that dimension, wherein the basic ranges 
correspond to respective non-overlapping value ranges 
between successive rule range boundaries in that dimension, 
and for each of at least two dimensions, the basic range 
identifiers comprise respective po-bit strings generated 
independently for that dimension by 

- defining a hierarchy of primitive ranges, which 
correspond to respective portions of the rule ranges 
between rule range boundaries in that dimension such 
that each rule range in the dimension is represented by 
one or more primitive ranges, wherein primitive ranges 
in the same level of the hierarchy are non-overlapping 
and each primitive range in a level above the lowest 
hierarchy level is a subset of a primitive range in the 
level below, 

- assigning a primitive range identifier to each 
primitive range in the hierarchy such that primitive 
ranges in the lowest level have different identifiers 
and, in each higher level, any ranges which are subsets 
of the same range in the level below have different 
identifiers, and 

- producing a unique pD-bit basic range identifier for 
each basic range such that the po-bit identifier 
comprises a concatenation of the primitive range 
identifiers for the primitive ranges intersected by 
that basic range, the primitive range identifiers being 
concatenated in order of increasing hierarchy level; 
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a ternary content-addressable memory storing a set of 
ternary rule vectors/ each associated with a said rule and 
derived for that rule in dependence on the hierarchy for 
each of said at least two dimensions; and 

control logic configured to identify the data value in the 
packet corresponding to each said dimension, to access the 
first memory to retrieve the basic range identifier 
corresponding to the basic range containing the data value 
so identified for each dimension, to combine the basic range 
identifiers for said plurality of dimensions to produce a 
search key, and to supply the search key to the ternary 
content-addressable memory for comparison with said ternary 
rule vectors to identify at least one rule which applies to 
the data packet . 

12. (original) Apparatus according to claim 11 wherein the 
control logic is further configured such that, prior to 
Classifying a first data packet, the control logic generates 
said set of basic range identifiers for each of said 
plurality of dimensions and stores the^ basic range 
identifiers in the first memory, and derives said set of 
ternary rule vectors in dependence on the hierarchy for each 
of said at least two dimensions and stores the rule vectors 
in the ternary content-addressable memory. 

13. (original) A data processing device for connection as a 
node of a network system, the device comprising: 

communications circuitry for communication of data 
packets between the device and other nodes of the network 
system; and 
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packet classification apparatus according to claim 11^ 
wherein the control logic is connected to said 
communications circuitry for receiving data packets to be 
classified therefrom. 

14. (original) A computer program product comprising a 
computer readable medium having embodied therein computer 
readable program code means for causing a processor of a 
data processing device to perform a method for classifying 
data packets to determine which of a plurality of predefined 
processing rules applies to each data packet, each said rule 
being associated with a range of possible data values in 
each of a plurality of dimensions corresponding to 
respective data items in the data packet, the method 
comprising: 

(a) for each dimension, identifying the corresponding data 
value in the packet and determining which of a set of 
predefined basic ranges contains that data value, wherein 
the basic ranges correspond to respective non-overlapping 
value ranges between successive rule range boundaries in 
that dimension; 

(b) for the basic range so determined for each dimension, 
selecting a corresponding basic range identifier from a set 
of predefined basic range identifiers corresponding to 
respective basic ranges in that dimension, wherein, for each 
of at least two dimensions, the basic range identifiers 
comprise respective po-bit strings generated independently 
for that dimension by 

- (bl) defining a hierarchy of primitive ranges, which 
correspond to respective portions of the rule ranges 
between rule range boundaries in that dimension such 
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that each rule range in the dimension is represented by 
one or more primitive ranges, wherein primitive ranges 
in the same level of the hierarchy are non-overlapping 
and each primitive range in a level above the lowest 
hierarchy level is a subset of a primitive range in the 
level below, 

- (b2) assigning a primitive range identifier to each 
primitive range in the hierarchy such that primitive 
ranges in the lowest level have different identifiers 
and, in each higher level, any ranges which are subsets 
of the same range in the level below have different 
identifiers, and 

- (b3) producing a unique pp-bit basic range identifier 
for each basic range such that the pu-bit identifier 
comprises a concatenation of the primitive range 
identifiers for the primitive ranges intersected by 
that basic "range, the primitive range identifiers being 
concatenated in order of increasing hierarchy level ; 

(c) combining the basic range identifiers for said plurality 
of dimensions to produce a search key; 

(d) supplying the search key to a ternary 
content-addressable memory; 

(e) in the memory, comparing the search key with a set of 
prestored ternary rule vectors, each associated with a said 
rule and derived for that rule in dependence on the 
hierarchy for each of said at least two dimensions, to 
identify at least one rule which applies to the data packet; 
and 

(f) prior to performing step (a) for a first data packet, 
generating said set of basic range identifiers for each of 
said plurality of dimensions, deriving said set of ternary 
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rule vectors in dependence on the hierarchy for each of said 
at least two dimensions, and storing the rule vectors in the 
ternary content-addressable memory. 

15-17 (canceled) 

18 (amended) A method according to claim ID for classifying 
data packets in a da t a processina device accordino to the 
values in respective data p ackets of a predetPrmined d^t,, 

the data p acket format. a plurality of 

classification results being defined in the device for 

respective ranges of valu^5. o f the data item, wherein the 
method compris es for each data packet: 

i^J segmenting said predetermined data item into a 

plurality of segments of predetermined length; 

(b) for each segment, selec ting, in dependence on the 

value of that segmen t^ a corre sponding segment identifier 

from a pre define d set of segment identifiers associated with 

respective — ranges of segme nt values, the corresp onding 

identifier being that ass o ciated with a range containing the 
value of said segment; 

(c) combining the segment identifiers selected for said 
plurality of se gments to produce a search Ifg^y,- 

i^i supplying the sea rch kev to a ternary 

conten t-addressable memory; and 

(e) in the memory, comparin g the search kev with a s^t 
of prestored ternary classification vectors, each assQci;^i-^d 
^^^^ ^ — said classification resul t and derived for that 

classification result in dependence on the segment 

icj^ptifiers correspon d ing to segment values contained in the 
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range of dat a item values for that classification result, to 
identif y a cla ssification result for the data packet, 
wherein: 

for the range of data item values corresponding to each 
classification result, a classification range is defined in 
each of a plurality of dimensions corresponding to 
respective said segments of the data item, the 
classification range for each dimension corresponding to the 
range of values of the corresponding segment which are 
contained in the range of data item values for that 
classification result; 

the set of segment identifiers utilized in step (b) for 
each segment is predefined for the dimension corresponding 
to that segment, the segment identifiers being associated 
with respective basic ranges in that dimension where the 
basic ranges correspond to respective non-overlapping 
segment-value ranges between successive classification range 
boundaries in that dimension; and 

for at least one said dimension, the segment 
identifiers comprise respective po-bit strings generated by 

- (bl) defining a hierarchy of primitive ranges, which 
correspond to respective portions of the classification 
ranges between classification range boundaries in that 
dimension such that each classification range in the 
dimension is represented by one or more primitive 
ranges, wherein primitive ranges in the same level of 
the hierarchy are non-overlapping and each primitive 
range in a level above the lowest hierarchy level is a 
subset of a primitive range in the level below, 

- (b2) assigning a primitive range identifier to each 
primitive range in the hierarchy such that primitive 
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ranges in the lowest level have different identifiers 
and, in each higher level, any ranges which are subsets 
of the same range in the level below have different 
identifiers, and 

- (b3) producing a unique po-bit segment identifier for 
each basic range such that the p^-bit identifier 
comprises a concatenation of the primitive range 
identifiers for the primitive ranges intersected by 
that basic range, the primitive range identifiers being 
concatenated in order of increasing hierarchy level; 
and wherein each said ternary classif icatibn vector is 
derived for the associated classification result in 
dependence on the hierarchy for said at least one dimension. 

19. (original) A method according to claim 18 wherein, for 
each of at least two said dimensions, the segment 
identifiers comprise respective po-bit strings generated 
independently for that dimension by steps (bl) to (b3) . 

20. (original) A method according to claim 19 wherein, for 
each of said plurality of dimensions, the segment 
identifiers comprise respective p^-bit strings generated 
independently for that dimension by steps (bl) to (b3) . 

21. (original) A method according to claim 18 wherein, in 
step (b3) , each po-bit segment identifier begins with said 
concatenation of primitive range identifiers, and, in step 
(c) , the search key is produced by concatenating the segment 
identifiers for said plurality of segments. 
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22. (original) A method according to claim 21 wherein each 
ternary classification vector is generated from a 
concatenation of subvectors, corresponding to respective 
said dimensions, for the associated classification result, 
where, for said at least one dimension, for each 
classification result a said subvector corresponding to each 
of the primitive ranges representing the classification 
range in that dimension is defined such that the subvector 
corresponding to a primitive range begins with a 
concatenation, in order of increasing hierarchy level, of 
the primitive range identifier of that range with the 
primitive range identifier of any lower-level primitive 
range of which that range is a subset, the resulting 
concatenation being made up to po-bits by bits of value X. 

23. (original) A method according to claim 22 wherein the 
set of classification vectors comprises, for each 
classification result, a classification vector, comprising 
said concatenation of subvectors, for each possible 
combination of subvectors for that classification result. 

24. (original) A method according to claim 22 wherein the 
set of classification vectors comprises, for each 
classification result, a reduced set of classification 
vectors obtained by eliminating redundancy in the set of all 
possible combinations of subvectors for that classification 
result in a concatenation of the subvectors corresponding to 
respective said dimensions. 

25. (original) A method according to claim 18 wherein the 
primitive range identifiers assigned in step (b2) are such 
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that the identifiers assigned to primitive ranges in the 

lowest hierarchy level are prefix unique, and the 

identifiers assigned to any ranges which are subsets of the 
same range in the level below are prefix unique. 

26. (original) A method according to claim 18 wherein the 
primitive range identifiers assigned in step (b2) are such 
that primitive range identifiers in the same hierarchy level 
have the same number of bits. 

27. (canceled) 

28. (original) A method according to claim 18, the method 
including, prior to performing step (a) for a first data 
packet : 

generating said set of segment identifiers; and 
deriving said set of ternary classification vectors in 
dependence on the segment identifiers and storing the 
classification vectors in the ternary content-addressable 
memory . 

29-31. (canceled) 
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